From b20e85fe146af03d9ba3180be4a5c621b8a7b8ec Mon Sep 17 00:00:00 2001 From: rubenb Date: Tue, 17 Oct 2023 13:38:38 +0200 Subject: [PATCH] add sudoers config for sysadmingroup --- .../roles/base-config-debian-os/tasks/main.yaml | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/linux/base-config-debian/roles/base-config-debian-os/tasks/main.yaml b/linux/base-config-debian/roles/base-config-debian-os/tasks/main.yaml index 4b961ec..03a3ab2 100644 --- a/linux/base-config-debian/roles/base-config-debian-os/tasks/main.yaml +++ b/linux/base-config-debian/roles/base-config-debian-os/tasks/main.yaml @@ -205,6 +205,22 @@ notify: restart nslcd #++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +#++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +# configure sudo for sysadmin group +# add sysadmin group to sudoers +- name: Add sysadmin group to sudoers + file: + path: /etc/sudoers.d/vn + state: touch + mode: u=rw,g=r,o=r + +# add a line to /etc/sudoers.d/vn file +- name: add a line to /etc/sudoers.d/vn file + lineinfile: + path: "/etc/sudoers.d/vn" + line: "%sysadmin ALL=(ALL) NOPASSWD: ALL" +#++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + #++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ # Proteger grub - name: GRUB se password boot protection